https://bugzilla.redhat.com/show_bug.cgi?id=652183
Bug 652183 depends on bug 1306575, which changed state.
Bug 1306575 Summary: Review Request: disruptor-thrift-server - Thrift Server implementation backed by LMAX Disruptor
https://bugzilla.redhat.com/show_bug.cgi?id=1306575
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |ERRATA
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=652183
Bug 652183 depends on bug 1244655, which changed state.
Bug 1244655 Summary: Review Request: async - StumbleUpon's Async Library
https://bugzilla.redhat.com/show_bug.cgi?id=1244655
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |CLOSED
Resolution|--- |RAWHIDE
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=652183
gil cattaneo <puntogil(a)libero.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On|1244655 |
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1244655
[Bug 1244655] Review Request: async - StumbleUpon's Async Library
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=652183
gil cattaneo <puntogil(a)libero.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On|1286467 |
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1286467
[Bug 1286467] Review Request: curvesapi - Java implementation of various
mathematical curves
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=652183
gil cattaneo <puntogil(a)libero.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1323442
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1323442
[Bug 1323442] Review Request: xtreemfs - distributed file system
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1316430
Bug ID: 1316430
Summary: Version 3.2.1 has a CVSS 10.0 vulnerability
Product: Fedora
Version: 23
Component: apache-commons-collections
Severity: high
Assignee: msimacek(a)redhat.com
Reporter: dchen(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jaromir.capik(a)email.cz,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Description of problem:
Forward from Jennifer Winer:
Version 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of
vulnerability that exists. By merely existing on the classpath, this
library causes the Java serialization parser for the entire JVM process
to go from being a state machine to a turing machine. A turing machine
with an exec() function!
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103https://commons.apache.org/proper/commons-collections/security-reports.htmlhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-j...
Version-Release number of selected component (if applicable):
Fedora 24 is already upgrade to 3.2.2, but not Fedora 23 and 22
Actual results:
Fedora 23 and Fedora 22 are still with apache-commons-collections-3.2.1
Expected results:
Fedora 23 should be updated to apache-commons-collections-3.2.2
If you see fit, please also update Fedora 22 as well.
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.